denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wolfssl: Ensure X25519/X448 public key is valid

Browse Source
This commit is contained in:
Tobias Brunner
2026-07-22 18:20:12 +02:00
parent 1fe813f05e
commit 05625acc2a
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/wolfssl/wolfssl_x_diffie_hellman.c
+6 -3
View File
@@ -121,8 +121,9 @@ METHOD(key_exchange_t, set_public_key_25519, bool,
{
return FALSE;
}
if (wc_curve25519_import_public_ex(value.ptr, value.len, &this->pub.key25519,
if (wc_curve25519_check_public(value.ptr, value.len,
EC25519_LITTLE_ENDIAN) != 0 ||
wc_curve25519_import_public_ex(value.ptr, value.len, &this->pub.key25519,
EC25519_LITTLE_ENDIAN) != 0)
{
DBG1(DBG_LIB, "%N public value is malformed",
@@ -211,7 +212,9 @@ METHOD(key_exchange_t, set_public_key_448, bool,
return FALSE;
}
if (wc_curve448_import_public_ex(value.ptr, value.len, &this->pub.key448,
if (wc_curve448_check_public(value.ptr, value.len,
EC448_LITTLE_ENDIAN) != 0 ||
wc_curve448_import_public_ex(value.ptr, value.len, &this->pub.key448,
EC448_LITTLE_ENDIAN) != 0)
{
DBG1(DBG_LIB, "%N public value is malformed",